An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day.
In OpenID Connect in Action you will
Build client applications that integrate OpenID Connect adhering to best practices
Create single-page applications secured with OpenID Connect
Integrate OpenID connect with native mobile and server-side web applications
Federate access to APIs/microservices from a client application
Use OpenID Connect to secure access to smart TV applications
Explore common login security pitfalls and how to avoid them
Take a deep-dive into the internals of OpenID Connect
Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more.
about the technology
OpenID Connect is an easy-to-implement identity layer built on top of OAuth 2. OpenID Connect helps secure billions of user interactions on the internet daily. Because it uses the JSON standard, OpenID Connect is more lightweight than legacy alternatives and flexible enough to meet the ID federation requirements for all types of modern applications.
about the book
OpenID Connect in Action teaches you to deploy OpenID Connect to secure access to your apps. Ten-year access management veteran Prabath Siriwardena takes you in-depth with the widely adopted technology, showing you how to optimize OpenID Connect for your application’s specific use cases. You’ll work to secure end-to-end example applications created with React and React Native, and even develop solutions for Smart TVs and APIs.
Author(s): Prabath Siriwardena
Publisher: Manning Publications
Year: 2023
Language: English
Pages: 364
Copyright_2023_Manning_Publications
welcome
1_The_OpenID_Connect_landscape
2_The_cornerstone_of_OpenID_Connect
3_Securing_access_to_a_single-page_application
4_The_building_blocks_of_an_ID_token
5_Requesting_and_returning_claims
6_Securing_access_to_a_server-side_web_application
7_Logging_out
8_Claim-based_access_control_with_Open_Policy_Agent_(OPA)
9_Securing_access_to_a_native_mobile_application_with_OpenID_Connect
10_Mitigating_common_threats_and_vulnerabilities
Appendix_A._React_fundamentals